Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File:                     01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier:          V/ajTuI4wtdTLIQIVBYIyN15Ecms+S+AJS9jdjJvQtw=
Subject key identifier:   AD:BF:E7:D0:F2:89:53:44:67:CF:6F:FC:F4:B2:4E:2C:C4:26:A3:1D
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer:       /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial:       0193579B5BC777C36F58FAC044E4C94284D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 06:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:19 +0000
Files and hashes:         1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: 1XjD9HQBXMbWYeI8XTJdMDvChwR6tN3I4k6EZOmf+UA=)
                          2: f9LwU7Gmfgd15acVyl-SNprnqfM.roa (hash: ec1bl3uORZ5hx9XBI8oaLkFYM5TSDkuOi3D7e15ssWc=)
                          3: kArDKH-KtA8VA5AmPH3h4pi7njc.roa (hash: 2b6lK8j1Ej3C8q53Yo8doOW1BNbsrU7u2zHdp8vir0E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:5b:c7:77:c3:6f:58:fa:c0:44:e4:c9:42:84:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
        Validity
            Not Before: Nov 23 06:00:19 2024 GMT
            Not After : Nov 24 06:00:19 2024 GMT
        Subject: CN=adbfe7d0f289534467cf6ffcf4b24e2cc426a31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:20:0f:c7:9b:65:cd:a2:6b:1a:3a:a2:a5:
                    03:db:d1:44:db:5f:f0:2b:3f:29:a2:d4:b0:b6:73:
                    4d:aa:f3:fa:ee:c5:2a:5e:ee:15:21:1e:d5:17:9f:
                    84:6d:78:b1:c4:2a:85:82:95:5e:a6:92:d6:d8:0a:
                    0a:af:25:be:70:24:34:58:88:33:ee:4f:04:ce:47:
                    ca:51:39:dc:53:7f:c3:23:b2:5e:07:20:61:54:92:
                    43:b1:d5:5a:a0:de:8e:01:c7:82:f7:28:58:a5:07:
                    72:03:13:02:f7:9f:72:fd:05:a9:c2:81:67:4b:f2:
                    ee:62:e7:74:c8:fb:18:1a:46:c2:41:14:f8:c6:e1:
                    e0:61:28:b0:15:69:f0:47:4c:51:ca:59:53:aa:04:
                    00:c4:dd:17:46:2e:bc:2f:f3:a8:a3:22:92:4e:3e:
                    df:ca:a1:e6:74:ad:58:78:44:d9:12:22:56:2a:0f:
                    4f:ad:53:bf:28:41:8c:34:82:aa:c3:06:12:78:26:
                    b8:c1:b9:cc:b0:7c:ae:75:70:3c:dc:56:9e:1d:48:
                    2d:75:49:22:38:ac:d8:b1:c6:b6:6e:45:de:62:8b:
                    40:ec:34:64:c0:ba:8b:09:41:78:da:65:e9:f2:fb:
                    e1:ac:34:d6:0a:38:a3:aa:9a:de:f6:30:2f:2a:52:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BF:E7:D0:F2:89:53:44:67:CF:6F:FC:F4:B2:4E:2C:C4:26:A3:1D
            X509v3 Authority Key Identifier:
                keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0b:3b:f7:f9:f5:02:a0:0e:32:98:d9:30:66:42:07:f3:9b:
         47:83:b5:77:fc:87:8a:d0:d5:c2:14:43:c8:35:e2:51:82:db:
         fa:20:da:af:cd:94:cf:76:60:6f:c8:2e:2b:83:76:75:54:82:
         2c:05:b9:49:8d:57:e4:74:51:8f:62:a4:b0:7d:50:da:50:82:
         73:fc:b7:72:b0:fd:c1:8c:34:70:f0:36:15:3b:0b:70:f1:1a:
         71:28:a6:51:94:d9:a1:0a:88:50:51:db:f4:5f:b7:c3:e9:ed:
         df:a9:65:4e:a8:9d:eb:90:c9:b0:36:c0:cd:26:db:f5:0f:94:
         65:f1:7d:12:db:43:7d:b3:41:1b:3b:17:26:c9:99:b1:6e:d3:
         7b:67:6a:c1:78:ad:b2:3d:36:c6:fa:1f:ed:81:eb:4e:c4:fe:
         e9:1c:e2:20:46:88:44:3c:8c:38:bc:6b:2d:d2:b7:0d:f2:2c:
         24:fa:af:ab:f9:2b:f2:e1:d2:b4:dc:85:08:8b:83:09:bd:be:
         52:f1:63:59:9f:8a:63:5e:ef:77:f1:9b:9f:0f:56:11:f4:30:
         6e:31:66:b4:a7:1c:6c:24:33:e5:23:5b:e1:96:7d:2b:80:2f:
         24:fc:a7:8c:6b:b3:8d:8f:b6:3b:6c:e8:72:03:d9:c1:1a:b4:
         68:29:bb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:03 2024 by rpki-client on console-fra.rpki-client.org